Worked on the infiniflow/ragflow repository to enhance authentication resilience by introducing a session-based fallback mechanism for OAuth and OIDC flows. Developed in Python, this feature preserves server-side user state across transient 401 errors, reducing unnecessary redirects and improving stability during login race conditions. The approach involved updating backend authentication logic to consult session data after JWT or API-token checks, ensuring existing authentication paths such as local login and SDK/API key remained unaffected. Focused on session management and API development, the work was validated through comprehensive end-to-end testing to confirm that non-OAuth authentication flows continued to function without regression.